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APPENDIX A 

CLAIM AMENDMENTS RELATIVE TO THE SUBMISSION OF 6/8/2005 

1. (Currently amended) A method for communications of a message 
cryptographically processed with RSA (Rivest, Shamir & Adleman) public key 
encryption, comprising the steps of: 

developing k distinct random prime numbers pi, P2, • . ■ , P*. wherein k is an 

integer greater than 2; 
providing a number e relatively prime to (pH)(p2-l)*. . . (P/H); 
providing a composite number n equaling the product pr p 2 ". ■ ■ Vk\ 
receiving a ciphertext word signal C which is formed by encoding a plaintext 
message word signal M to a ciphertext word signal C, where M 
corresponds to a number representative of the message and 

0 < M < n-1 

where C is a number representative of an encoded form of the plaintext 
message word signal M such that 

C = M 6 (mod n) 

and where e is associated with an intended recipient of the ciphertext 
word signal C; and 

deciphering the received ciphertext word signal C at the intended recipient 
having available to it the k distinct random prime number p-i, p 2 , . . . p*; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein the deciphering step is divided into sub-steps, one sub-step for each 
of the k distinct random prime numbers; and 
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wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the deciphering step if the k 
distinct random prime numbers are used, relative to the number of 
computational cycles for performing a deciphering step if the pair of prime 
numbers p and g is used instead . 

2. (Previously presented) The method according to claim 1, wherein the 
deciphering step includes 

establishing a number, d, as a multiplicative inverse of e(mod(lcm((pi-1), 

( P2 -1), ...(p^1)))), and 
decoding the ciphertext word signal C to the plaintext message word signal 

M where M= C d (mod n). 

3. (Currently amended) A method for communications of a message signal 
M, cryptographically processed with RSA public key encryption in a system 
having j terminals, each terminal being characterized by an encoding key E, = 
(e/, n,-) and a decoding key D,- = (d/, n,) f where i = 1, 2, . . . , j, and the message 
signal M, corresponds to a number representative of a message-to-be-received 
from the \ th terminal, the method comprising the steps of: 

establishing n, where n, is a composite number of the form 

where k is an integer greater than 2, 

P/,1, P/,2, ■ • • , Pi,k are distinct random_prime numbers, 

e, is relatively prime to l cm(p ^-4v-P4^-4^^-44 lcm(p /i -1 . p,?-1 o i k - 

Ij, and 

d, is selected from the group consisting of the— a class of numbers 
equivalent to a multiplicative inverse of 



e / (mod(lcm((p /t1 -1), (p,, 2 -1), . • • , (p,,a~1 )))); 
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receiving by a recipient terminal (i = y) from a sender terminal (i = x, x ^ y) a 
ciphertext signal C x formed by encoding a digital message word signal 
M x , wherein the encoding includes 

transforming said message word signal Ma to one or more message 
block word signals M x ", each block word signal M x " corresponding 
to a number representative of a portion of said message word 
signal M x in the range 0 < M x " < n^-1, and 
transforming each of said message block word signals M x " to a 
ciphertext word signal C x that corresponds to a number 
representative of an encoded form of said message block word 
signal M x " where 

C x = M x " By (modn y ); and 



deciphering the received ciphertext word signal C x at the recipient terminal 
having available to it the k distinct random prime numbers p y ,i, p y ,2, 
Py /f for establishing its d y ; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and g, and the composite number m having the same number of 
digits as the composite number n; 

wherein the deciphering step is divided into sub-steps, one sub-step for each 
of the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the deciphering step if the k 
distinct random prime numbers are used, relative to the number of 
computational cycles for performing a deciphering step if the pair of prime 
numbers p and g is used instead . 
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4. (Currently amended) A system for communications of a message 
cryptographically processed with an RSA public key encryption, comprising: 
a communication channel for transmitting a ciphertext word signal C; 
encoding means coupled to said channel and adapted for transforming a 
transmit message word signal M to the ciphertext word signal C using a 
composite number, n, 

where n is a product of the form 

n = PvPr- • ■ 'Pk, 

k is an integer greater than 2, and pi, P2> • • • . Pk are distinct 

random prime numbers, 
where the transmit message word signal M corresponds to a number 

representative of the message and 0 < M < n-1 , 
where the ciphertext word signal C corresponds to a number 

representative of an encoded form of said message through a 

relationship of the form 

C = M° (mod n), and 

where e is a number relatively prime to lcm(pi-1, P2-1, . . . , P*-1); 
and 

decoding means coupled to said channel and adapted for receiving the 
ciphertext word signal C from said channel and, having available to it the 
k distinct random prime numbers p-i, P2, . - - Pk, for transforming the 
ciphertext word signal C to a receive message word signal M' where M' 
corresponds to a number representative of a decoded form of the 
ciphertext word signal C through a relationship of the form 



M % = C d (mod n) 
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where d is selected from the group consisting of a class of numbers 
equivalent to a multiplicative inverse of 

e(mod(lcm(( Pl -1), ( P2 -1), .... (p^1))))l 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and g, and the composite number m having the same number of 
digits as the composite number n; 

wherein transforming the ciphertext word signal C to a receive message 
word signal M' is divided into sub-steps, one sub-step for each of the k 
distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the transforming of the ciphertext 
word signal C if the k distinct random prime numbers are used, relative to 
the number of computational cycles for performing a transforming of the 
ciphertext word signal C if the pair of prime numbers p and g is used 
instead . 

5. (Currently amended) A system for communications of a message 
cryptographically processed with an RSA public key encryption, the system 
having a plurality of terminals coupled by a communications channel, 
comprising: 

a first terminal of the plurality of terminals characterized by an encoding key 
E A = (e*, n*) and a decoding key = (d A , n A ), 
where n A is a composite number of the form 

n A - p A yp A ?. • • 'Pam 



where 

k is an integer greater than 2, 
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Pal Pa,2, ■ ■ ■ , PA,k are distinct random prime numbers, 
eA is relatively prime to 

lcm(p Ai i-1 , p*,2-1 , ■ . . , Pa/H). and 

d^ is selected from the group consisting of tbe-a_class of numbers 
equivalent to a multiplicative inverse of 

e A (mod(lcm((p A1 -1), (p ,4,2-1), . . . . (P/ur-1)))); and 

a second terminal of the plurality of terminals having 

blocking means for transforming a first message, which is to be 
transmitted on said communications channel from said second 
terminal to said first terminal, into one or more transmit message word 
signals Mb, where each Me corresponds to a number representative 
of said first message in the range 

0 < M e ^ ru— 1 , and 

encoding means coupled to said channel and adapted for transforming 
each transmit message word signal M e to a ciphertext word signal Ce 
that corresponds to a number representative of an encoded form of 
said first message through a relationship of the form 

-e^-M^mod^ f C B ^ M B e * (mod n A ) , 

said first terminal having 

decoding means coupled to said channel and adapted for receiving each 
of said ciphertext word signals Cs from said channel and, having 
available to it the k distinct random prime numbers p^j, Pa,2, . . • Pa*, 
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for transforming each of said ciphertext word signals Cb to a receive 
message word signal M^Ma, and 
means for transforming said receive message word signal JVU^M^ to said 
first message, where M^B-Md corresponds to a number representative 
of a decoded form of C s through a relationship of the form 

- M ' B = C B dA ( mo&njf M B '= C B d * (modn A ) ; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein transforming said receive message word signal Mr to said first 
message is divided into sub-steps, one sub-step for each of the k distinct 
random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the transforming of said receive 
message word signal Mr if the k distinct random prime numbers are 
used, relative to the number of computational cycles for performing a 
transforming of said receive message word signal Mr if the pair of prime 
numbers p and q is used instead . 

6. (Currently amended) The system according to claim 5 wherein said 

second terminal is characterized by an encoding key Eb = (es, ns) and a 
decoding key Db= (ds, ne), where 

ne is a composite number of the form 

Hb = PbxPbx- - - 'Pbm 

where 
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k is an integer greater than 2, 

Pe,i, Pe,2, PB.k are distinct random prime numbers, 
ee is relatively prime to 

lcm(p s ,i-1, Pe.2-1, . . . , Pe./^1), and 

de is selected from the group consisting of a class of numbers equivalent 
to a multiplicative inverse of 

e B (mod(lcm((pe,i-1) ) (Pb,2-1), .... (Pb,/<-1)))), 

said first terminal further having 

blocking means for transforming a second message, which is to be 
transmitted on said communications channel from said first terminal to 
said second terminal, to one or more transmit message word signals Ma, 
where each_IVU corresponds to a number representative of said message 
in the range 

0 < M A < ne-1, and . 

encoding means coupled to said channel and adapted for transforming each 
transmit message word signal M A to a ciphertext word signal and for 
transmitting C A on said channel, where corresponds to a number 
representative of an encoded form of said secondjnessage through a 
relationship of the form 

'Gj-^M^^othr^ C A = M/ B (modn s ) ; and 
said second terminal further having 
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decoding means coupled to said channel and adapted for receiving each of 
said ciphertext word signals C* from said channel and, having available 
to it the k distinct random prime numbers ps,i, Pb,2, • • • , Pe./c, for 
transforming each of said ciphertext word signals to a receive message 
word signal M^M^', and 

means for transforming said receive message word signals M^a-Ma. to said 
second message, where M^a-Ma. corresponds to a number representative 
of a decoded form of Ca through a relationship of the form 

-M \ = C A dB {mo&n T ) M A 1 = C A d ° (mod n B ) . 

7. (Canceled). 

8. (Canceled). 

9. (Currently amended) A system for communications of message signals 
cryptographically processed with RSA public key encryption signing , comprising: 

j terminals including first and second terminals, each of the j terminals 
being characterized by an encoding key E, = (e„ n,) and decoding key 
D/ = (d„ n/), where i = 1, 2, . . . j, each of the j terminals being adapted to 
transmit a particular one of the message signals where an \ th message 
signal Mj is transmitted from an \ th terminal and 

0 < M; < nr-1 , 

n,- being a composite number of the form 

= PiA'PiX- ■ • *P',k 

where 
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k is an integer greater than 2, 

P/,1. P/.2, . . . , Pi t k are distinct random prime numbers, 
e, is relatively prime to lcm(p / - ( i-1 l p/ ( 2-1, . . . , P/,*-1), and 
d,- is selected from the group consisting of the-a class of numbers 
equivalent to a multiplicative inverse of 

e / (mod(lcm((p /i1 -1), (p, i2 -1), - . . , (P/ t /r-1 )))); 

said first terminal including 

means for encoding a digital message word signal Mi to be 
transmitted from said first terminal (i=1) to said second terminal 
(i=2), said encoding means transforming said digital message 
word signal Mi to a signed message word signal Mi s using a 
relationship of the form 

M^H\/h^mt)d^-yMi s = Af/^mod^); and 



means for transmitting said signed message word signal Mi s from said first 
terminal to said second terminal, wherein said second terminal includes 
means for decoding said signed message word signal M 1s to said 
digital message word signal Mi; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime number each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein encoding a digital message word signal M i is divided into sub-steps, 
on sub-step for each of the k distinct random prime numbers; and 

wherein for a give number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the encoding of the digital 
message word signal M i if the k distinct random prime numbers are 
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used, relative to the number of computational cycles for performing an 
encoding of the digital message word signal M i if the pair of prime 
numbers p and g is used instead . 

10. (Currently amended) The system of claim 9^wherein the means for 
decoding signed message word signal Ma^-Mis includes means for transforming 
said signed message word signal Ma^ -Mi^ to said digital message word signal 
Mi using a relationship of the form -M 1 = M^ ^mo&n^fM^ = /W 1s e1 (modn 1 ) . 



11. (Currently amended) A communications system for transferring a 
message signal cryptographically processed with RSA public key encryption, 
the communications system comprising: 

j communication stations including first and second stations, each of the j 
communication stations being characterized by an encoding key 
E, = (e,-, n,) and a decoding key D, = (d,-, n,), where i = 1 , 2, . . . , j, each of 
the j communication stations being adapted to transmit a particular one of 
the message signals where an \ th message signal M, is received from an 
\ th communication station, and 

0 < M, < n^1 

n, being a composite number of the form 

Hi = PixPiX- • • 'Pi.k 

where 

k is an integer greater than 2, 

P/,i, P/,2. ■ ■ • ,j>i,k are distinct random_prime numbers, 
e,- is relatively prime to lcm(p/ i i-1 ) p /i2 -1, . . . ,P/,*-1), and 
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d, is selected from the group consisting of ibe-a class of numbers 
equivalent to a multiplicative inverse of 

e / (mod(lcm((p /t1 -1) ) (p/ i2 -1), ... (P/.*-1 )))) A 

said first station including 

means for encoding a digital message word signal Mi to be 
transmitted from said first station (i =1) to said second station 



means for transforming said digital message word signal Mi to one or 
more message block word signals MT, each block word signal MT 
being a number representative of a portion of said digital message 
word signal Mi in the range 
0 < Mr < n2-1, and 

means for transforming each of said message block word signals Mr 
to a ciphertext word signal G4-Ci using a relationship of the form 



means for transmitting said ciphertext signals Ci from said first station to 
said second station, wherein said second station includes 

means for deciphering said ciphertext signals Ci using p2,i, P2,2, . • • 
p 2 ,k to produce said digital message word signal M-i; 

wherein p and g are a pair of prime numbers that product of which eguals a 
composite number m, the k distinct random prime numbers each smaller 
than p and g, and the composite number m having the same number of 
digits as the composite number n; 

wherein deciphering said ciphertext signals C i is divided into sub-steps, one 
sub-step for each of the k distinct random prime numbers; and 
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wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the deciphering of said ciphertext 
signals C i ^ if the k distinct random prime numbers are used, relative to the 
number of computational cycles for performing a deciphering of said 
ciphertext signals C i if the pair of prime numbers p and g is used instead . 

12. (Currently amended) The communications system of claim 11, wherein 
the deciphering means includes 

means for decoding said ciphertext word signals Ci to said message block 
word signals Mr using a relationship of the form 

M^&r-tmofrnY)- M, " = C^ 2 (mod n 2 ) , and 



means for transforming said message block word signals Mr to said 
message word signal Ml 

13. (Canceled). 

14. (Currently amended) A method of communicating a message 
cryptographically processed with an RSA public key encryption, comprising the 
steps of: 

selecting a public key portion e associated with a recipient intended for 

receiving the message; 
developing k distinct random prime numbers, p 1f P2, • ■ • P*, where k > 3, and 

checking that each of the k distinct random prime numbers minus 1, pi- 

1, P2-1, ■ ■ . P/H, is relatively prime to the public key portion e; 
computing a composite number, n, as a product of the k distinct random 

prime numbers; 

receiving a ciphertext message formed by encoding a plaintext message 
data M to the ciphertext message data C using a relationship of the form 
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C = A/f(mod n) 

where M represents the message, where 0 < M < n-1, and where the 

sender knows n and the public key portion e but has no access to the k 

distinct random prime numbers, Pi, P2, • ■ • p*; and 
deciphering at the recipient the received ciphertext message data C to 

produce the message, the recipient having access to the k distinct 

random prime numbers, p 1( P2, • . . P/d 
wherein p and q are a pair of prime numbers that product of which equals a 

composite number m, the k distinct random prime numbers each smaller 

than p and q, and the composite number m having the same number of 

digits as the composite number n; 
wherein the deciphering step is divided into sub-steps, one sub-step for each 

of the k distinct random prime numbers; and 
wherein for a given number of digits for composite numbers n and m, it takes 

fewer computational cycles to perform the deciphering step if the k 

distinct random prime numbers are used, relative to the number of 

computational cycles for performing a deciphering step if the pair of prime 

numbers p and q is used instead . 

15. (Previously presented) The method according to claim 14, comprising 
the further step of: 

establishing a private key portion d by a relationship to the public key portion 

e in the form of d= e* 1 (mod((pi-1)-(p2-l)— (Pa-1))), 
wherein the deciphering step includes decoding the ciphertext message data 

C to the plaintext message data M using a relationship of the form 

M = C d (mod n). 
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16. (Currently amended) A method of communicating a message 
cryptographically processed with RSA public key encryption, comprising the 
steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers pi, P2, - • p*, where k > 3, and 
checking that each of the k distinct random prime numbers minus 1, pi- 
1 , P2-1 , • • • Pa— I, is relatively prime to the public key portion e; 

establishing a private key portion d by a relationship to the public key portion 
e in the form of d = e" 1 (mod((pi— 1)-(P2-I)--(pa-1))); 

computing a composite number, n, as a product of the k distinct random 
prime numbers; 

receiving a ciphertext message data C representing an encoded form of a 

plaintext message data M: and 
decoding the received ciphertext message data C to the plaintext message 

data M using a relationship of the form 

M=C d (mod n), 

the decoding_performed by a recipient owning the private key portion d and 
having access to the k distinct random prime numbers p 1( p 2 , . . . Pk! 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and g, and the composite number m having the same number of 
digits as the composite number n; 

wherein the decoding step is divided into sub-steps, one sub-step for each of 
the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the decoding step if the k distinct 
random prime numbers are used, relative to the number of computational 
cycles for performing a decoding step if the pair of prime numbers p and 
g is used instead . 
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17. (Previously presented) The method according to claim 16, wherein the 
ciphertext message data C is formed by encoding the plaintext message data M 
to the ciphertext message data C using a relationship of the form C = A/f (mod 
n), wherein 0 < M < n-1 and wherein n and the public key portion e are 
accessible to the sender although it has no access to the k distinct random 
prime numbers pi, p 2 , . . . p*. 

18. (Currently amended) A method of communicating a message 
cryptographically processed with RSA public key e ncrypt i o n signing , comprising 
the steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers p 1( p 2j . . . p*, where k > 3, and 
checking that each of the k distinct random prime numbers minus 1, pi- 
1 , P2-1 , ■ • • p/c— I, is relatively prime to the public key portion e; 

establishing a private key portion d by a relationship to the public key portion 
e of the form d = e" 1 (mod((pi-1)*(p 2 -l)- -(Pa-I))); 

computing a composite number, n, as a product of the k distinct random 
prime numbers; 

encoding a plaintext message data M with the private key portion d to 
produce a signed message M s using a relationship of the form 

M s = (mod n), 

where 0 < M < n-1 ; 
receiving the signed message M s ; and 

deciphering the signed message to produce the plaintext message data M; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 



189742.03/1662.61700 



Page 78 of 128 



HP PDNO 200301647-5 



Appl. Nos. 09/694,416, 90/005,776 & 90/005,733 

Amdt. dated February 15, 2007 

Reply to Office Action of August 17, 2006 



wherein the encoding step is divided into sub-steps, one sub-step for each of 
the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the encoding step if the k distinct 
random prime numbers are used, relative to the number of computational 
cycles for performing an encoding step if the pair of prime numbers p and 
g is used instead . 

19. (Previously presented) The method of claim 18, wherein the deciphering 
step includes: 

decoding the signed message M s with the public key portion e to produce the 
plaintext message data M using a relationship of the form 
M = M s e (mod n). 

20. (Currently amended) A method for communicating a message 
cryptographically processed with RSA public key encryption, comprising the 
steps of: 

sending to a recipient a cryptographically processed message formed by 
assigning a number M to represent the message in plaintext message 
form, and cryptographically transforming the assigned number M from the 
plaintext message form to a number C that represents the message in an 
encoded form, wherein the number C is a function of 
the assigned number M, 

a number n that is a composite number equaling the product of at 
least three distinct random prime numbers, wherein 0 < M < n-1, 
and 

an exponent e that is a number relatively prime to a lowest common 
multiplier of the at least three distinct random prime numbers, 
wherein the number n and exponent e having been obtained by the 
sender are associated with the recipient to which the message is 
intended; and 
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receiving the cryptographically processed message which is decipherable by 
the recipient based on 
the number n, 
another exponent d, and 
the number C, 

wherein the exponent d is a function of the exponent e and the at least 

three distinct random prime numbers; 
wherein p and q are a pair of prime numbers that product of which equals a 

composite number m, the at least three distinct random prime numbers 

each smaller than p and q, and the composite number m having the 

same number of digits as the composite number n; 
wherein deciphering the cryptographically processed message is divided into 

sub-steps, one sub-step for each of the at least three distinct random 

prime numbers; and 
wherein for a given number of digits for composite numbers n and m, it takes 

fewer computational cycles to perform the deciphering if the at least three 

distinct random prime numbers are used, relative to the number of 

computational cycles for performing a deciphering if the pair of prime 

numbers p and g is used instead . 

21. (Previously presented) The method according to claim 20, 

wherein the cryptographically transforming step includes using a relationship 

of the form C = M° (mod n), 
wherein the exponent d is established based on the at least three distinct 

random prime numbers pi, p 2 , . . . p*, using a relationship of the form 

d=e 1 (mod((pi-1Hp2-l)-(p^1))), and 
wherein the cryptographically processed message is deciphered using a 

relationship of the form M=C d (mod n). 
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22. (Currently amended) A method for communicating a message 
cryptographically processed with RSA public key encryption, comprising the 
steps of: 

receiving from a sender a cryptographically processed message, in the form 
of a number C, which is decipherable by the recipient based on a number 
n, an exponent d, and the number C; and 
deciphering the cryptographically processed message, 

wherein a number M represents a plaintext form of the message, 
wherein the number C represents a cryptographically encoded form of 
the message and is a function of 
the number M, 

the number n that is a composite number equaling the product of 

at least three distinct random prime numbers, wherein 

0 < M < n-1, and 
an exponent e that is a number relatively prime to a lowest 

common multiplier of the at least three distinct random prime 

numbers, 

wherein the number n and exponent e are associated with the recipient to 
which the message is intended, and 

wherein the exponent d is a function of the exponent e and the at least 
three distinct random prime numbers; 
wherein p and q are a pair of prime numbers that product of which equals a 

composite number m, the at least three distinct random prime numbers 

each smaller than p and g, and the composite number m having the 

same number of digits as the composite number n; 
wherein deciphering the cryptographically processed message is divided into 

sub-steps, one sub-step for each of the at least three distinct random 

prime numbers; and 
wherein for a given number of digits for composite numbers n and m, it takes 

fewer computational cycles to perform the deciphering if the at least three 

distinct random prime numbers are used, relative to the number of 
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computational cycles for performing a deciphering if the pair of prime 
numbers p and g is used instead . 

23. (Previously presented) The method according to claim 22, 

wherein the number C is formed using a relationship of the form 
C = M° (mod n), 

wherein the exponent d is established based on the at least three distinct 
random prime numbers p 1t p 2 , . . . p*, using a relationship of the form 
dse 1 ((pi-1)-(p2»l)-(pi^1))), 

and wherein the number M is obtained using a relationship of the form 
M=C d (mod n). 

24. (Canceled). 

25. (Canceled). 

26. (Canceled). 

27. (Canceled). 

28. (Canceled). 

29. (Canceled). 

30. (Canceled). 

31. (Canceled). 

32. (Canceled). 



33. (Canceled). 
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34. (Currently amended) The method according to claim 14, wherein a 
message cryptographically processed by the sender with two-grime RSA public 
key encryption characterized by [[n]] the composite number m being e qua l to a 
compos i t e numb e r computed as the product of [[2]] the pair of prime numbers p 
and q, is decipherable with multi-prime (k > 2) RSA public key encryption 
characterized by the composite number n being computed as the product of the 
k distinct random prime numbers pi, P2, • • • P*. 

35. (Currently amended) The method according to claim 9, wherein the 
signed message word signal Mi Sj formed from the digital message word signal 
Mi being cryptographically processed at the first terminal with multi-prime 
(k > 2) RSA public key e ncrypt i on signing which is characterized by the 
composite number n being computed as the product of the k distinct random 
prime numbers p-i, p 2 , . . . Pk, is decipherable at the second terminal with two- 
prime RSA public key oncrypt i on signing characterized by [[n]] the composite 
number m being e qua l to a compos i to number computed as the product of [[2]] 
the pair of prime numbers p and q. 

36. (Currently amended) The method according to claim 16, wherein a 
message cryptographically processed by the sender with two-prime RSA public 
key encryption characterized by [[n]] the composite number m being e qua l to a 
compos i t o number computed as the product of [[2]] the pair of prime numbers p 
and q, is decipherable by the decoding with multi-prime (k > 2) RSA public key 
encryption characterized by the composite number n being computed as the 
product of the k distinct random prime numbers pi, p 2) . . . p*. 

37. (Currently amended) The method according to claim 18. wherein the 
signed message M s formed from the plaintext message data M being 
cryptographically processed at the sender with multi-prime (k > 2) RSA public 
key signing which is characterized by the composite number n being computed 
as the product of the k distinct random prime numbers pi, p 2 , . . . p*. is 
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decipherable by the decoding at the recipient with two-prime RSA public key 
signing characterized by [[n]] the composite number m being equa l to a 
compos i t e numb e r computed as the product of [[2]] the pair of prime numbers p 
and q. 

38. (Currently amended) The method according to claim 20, wherein a 
message cryptographically processed by the sender with two-prime RSA public 
key encryption characterized by [[n]] the composite number m being equal to a 
compos i t e numb e r computed as the product of [[2]] the pair of prime numbers p 
and q, is decipherable at the recipient with multi-prime RSA public key 
encryption characterized by the composite number n being computed as the 
product of the at least three distinct random prime numbers. 

39. (Currently amended) The method according to claim 22. wherein a 
message cryptographically processed by the sender with two-prime RSA public 
key encryption characterized by [[n]] the composite number m being e qu al to a 
compos i te number computed as the product of [[2]] the pair of prime numbers p 
and q, is decipherable at the recipient with multi-prime RSA public key 
encryption characterized by the composite number n being computed as the 
product of the at least three distinct random prime numbers. 

40. (Currently amended) A cryptography method for local storage of data by 
a private key owner, comprising the steps of: 

selecting a public key portion e; 

developing k distinct random prime numbers p-i, P2, • . • P/c, where k > 3, and 
checking that each of the k distinct random prime numbers minus 1, pi- 
1 , P2-1 ... P/H, is relatively prime to the public key portion e; 

establishing a private key portion d by a relationship to the public key portion 
e in the form of d= e" 1 (mod((p 1 -1) (p 2 -l)' -(p^1))); 
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computing a composite number, n, as a product of the k distinct random 
prime numbers that are factors of n, where only the private key owner 
knows the factors of n; and 

encoding plaintext data M to ciphertext data C for the local storage, using a 
relationship of the form 

C = M° (mod n), 

wherein 0 < M < n-1, whereby the ciphertext data C is decipherable only by 
the private key owner having available to it the factors of n; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein the encoding step is divided into sub-steps, one sub-step for each of 
the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the encoding step if the k distinct 
random prime numbers are used, relative to the number of computational 
cycles for performing an encoding step if the pair of prime numbers p and 
q is used instead .fr.il 

41. (Previously presented) The cryptography method in accordance with 
claim 40, further comprising the step of: 

decoding the ciphertext data C from the local storage to the plaintext data M 
using a relationship of the form M=C d (mod n). 

42. (Currently amended) A cryptographic communications system, 
comprising: 

a plurality of stations; 

a communications medium; and 
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a host system adapted to communicate with the plurality of stations via the 
communications medium sending [[a]] and receiving messages 
cryptographically processed with an RSA public key encryption, the host 
system including at least one cryptosystem configured for 

developing k distinct random prime numbers pi, P2, - . - , P*, where 
k>3, 

checking that each of the k distinct random prime numbers minus 1, 

Pi-1, P2-1, ■ ■ ■ P/H, is relatively prime to a public key portion e 

that is associated with the host system, 
computing a composite number, n, as a product of the k distinct 

random prime numbers, 
establishing a private key portion d by a relationship of the public key 

portion e in the form of d = e' 1 (mod((pi-1)-(p2-l)*-(p/r-1))), 
in response to an encoding request from the host system, encoding a 

plaintext message data M producing therefrom a ciphertext 

message data C to be communicated via the host system, the 

encoding using a relationship of the form 

C = M° (mod n), where 0 < M < n-1 , and 

in response to a decoding request from the host system, decoding a 
ciphertext message data C communicated via the host producing 
therefrom a plaintext message data M' using a relationship of the 
form 

M = C d (mod n) x 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

189742.03/1662.61700 Page 86 Of 128 HP PDNO 200301647-5 



Appl. Nos. 09/694,416, 90/005,776 & 90/005,733 

Amdt. dated February 15, 2007 

Reply to Office Action of August 17, 2006 



wherein decoding the ciphertext message data C is divided into sub-steps, 
one sub-step for each of the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the decoding of the ciphertext 
message data C 1 if the k distinct random prime numbers are used, 
relative to the number of computational cycles for performing a decoding 
of the ciphertext message data C if the pair of prime numbers p and g is 
used instead . 

43. (Currently amended) A system for communications of a message 
cryptographically processed with RSA public key encryption, comprising: 
a bus; and 

a cryptosystem communicatively coupled to and receiving from the bus 
encoding and decoding requests, the cryptosystem being configured for 
providing a public key portion e, 

developing k distinct random prime numbers pi, P2, . • • p*. where 
k>3, 

checking that each of the k distinct random prime numbers minus 1, 

Pi-1, P2-1, • • • Pa-I, is relatively prime to the public key portion e, 
computing a composite number, n, as a product of the k distinct 

random prime numbers, 
establishing a private key portion d by a relationship to the public key 

portion e in the form of d = e" 1 (mod((pi-1) (p2-l) "(P/r-1 ))), 
in response to an encoding request from the bus, encoding a plaintext 

form of a first message M to produce C, a ciphertext form of the 

first message, using a relationship of the form 

C = M* (mod n), 

where 0 < M < n-1 , and 
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in response to a decoding request from the host system, decoding C\ 
a ciphertext form of a second message, to produce M\ a plaintext 
form of the second message, using a relationship of the form 

M = C' d (mod n), 

the first and second messages being distinct or one and the same; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein decoding C is divided into sub-steps, one sub-step for each of the k 
distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the decoding of C if the k distinct 
random prime numbers are used, relative to the number of computational 
cycles for performing a decoding of C if the pair of prime numbers p and 
g is used instead . 

44. (Previously presented) The system of claim 42, wherein the at least one 
cryptosystem includes 

a plurality of exponentiators configured to operate in parallel in developing 
respective subtask values corresponding to the message. 

45. (Currently amended) The system of claim 42, wherein the at least one 
cryptosystem includes 

a processor, 

a data-address bus, 

a memory coupled to the processor via the data-address bus, 
a data encryption standard (DES) unit coupled to the memory and the 
processor via the data-address bus, and 
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a plurality of exponentiator elements coupled to the processor via the DES 
unit, the plurality of exponentiator elements being configured to operate 
in parallel in developing respective subtask values corresponding to the 
message. 

46. (Previously presented) The system of claim 45, wherein the memory and 
each of the plurality of exponentiator elements has its own DES unit that 
cryptographically processes message data received/returned from/to the 
processor. 

47. (Previously presented) The system of claim 45, wherein the memory is 
partitioned into address spaces addressable by the processor, including secure, 
insecure and exponentiator elements address spaces, and wherein the DES 
unit is configured to recognize the secure and exponentiator elements address 
spaces and to automatically encode message data therefrom before it is 
provided to the exponentiator elements, the DES unit being bypassed when the 
processor is accessing the insecure memory address spaces, the DES unit 
being further configured to decode encoded message data received from the 
memory before it is provided to the processor. 

48. (Previously presented) The system of claim 45, wherein the at least one 
cryptosystem meets FIPS (Federal Information Processing Standard) 140-1 
level 3. 

49. (Previously presented) The system of claim 45, wherein the processor 
maintains in the memory the public key portion e and the composite number n 
with its factors p 1f p 2 , . . . p*. 

50. (Currently amended) A system for communications of a message 
cryptographically processed with RSA public key encryption, comprising: 

a bus; and 
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a cryptosystem receiving from the system via the bus encoding and 
decoding requests, the cryptosystem including 

a plurality of exponentiator elements configured to develop subtask 

values, 
a memory, and 
a processor configured for 

receiving the encoding and decoding requests, each encoding 

request providing a plaintext message M to be encoded, 
obtaining a public key that includes an exponent e and a modulus 
n, a representation of the modulus n existing in the memory in 
the form of its k distinct random prime number factors 

Pi, P2 Pk, where k> 3, 

constructing subtasks, one subtask for each of the k factors, to be 
executed by the exponentiator elements for producing 
respective ones of the subtask values Ci, C 2 , . . . and 
forming a ciphertext message C from the subtask values Ci, 

C2, . . . C/c, 

wherein the ciphertext message C is decipherable using a private 
key that includes the modulus n and an exponent d which is a 
function of e; 

wherein p and q are a pair of prime numbers that product of which equals a 
modulus m, the k distinct random prime numbers each smaller than p 
and q, and the modulus m having the same number of digits as the 
modulus n; and 

wherein for a given number of digits for modulus n and modulus m, it takes 
fewer computational cycles to form the ciphertext message C if the k 
distinct random prime numbers are used, relative to the number of . 
computational cycles for forming a ciphertext message C if the pair of 
prime numbers p and g is used instead . 
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51. (Currently amended) The system of claim 50, wherein each one of the 
subtask values Ci, C 2 , . . . C* is developed using a relationship of the form 
C, = (mod p, ), where M, = M(mod p,), and e, = e(mod P/-1), and where 
i = 1,2, ...k. 

52. (Currently amended) A system for communications of a message 
cryptographically processed with RSA public key encryption, comprising: 

a bus; and 

a cryptosystem receiving from the system via the bus encoding and 
decoding requests, the cryptosystem including 

a plurality of exponentiator elements configured to develop subtask 

values, 
a memory, and 
a processor configured for 

receiving the encoding and decoding requests, each 
encoding/decoding request provided with a plaintext/ciphertext 
message M/C to be encoded/decoded and with or without a 
public/private key that includes an exponent e/d and a modulus 
n representation of which exists in the memory in the form of its 
k distinct random prime number p 1( p 2 , . . . Pk, where k > 3, 
obtaining the public/private key from the memory if the 
encoding/decoding request is provided without the 
public/private key, 
constructing subtasks to be executed by the exponentiator 
elements for producing respective ones of the subtask values 
Ml M 2) . . . M*/Ci, C 2 , . . . C/c, and 
forming the ciphertext/plaintext message C/M from the subtask 
values Cl C 2 , . . . C^/Mi, M 2) . . . M*; 
wherein p and q are a pair of prime numbers that product of which equals a 
modulus m, the k distinct random prime numbers each smaller than p 
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and q, and the modulus m having the same number of digits as the 
modulus n; and 

wherein for a given number of digits for modulus n and modulus m, it takes 
fewer computational cycles to form the ciphertext/plaintext message C/M 
if the k distinct random prime numbers are used, relative to the number of 
computational cycles for forming a ciphertext/plaintext message C7M' if 
the pair of prime numbers p and g is used instead . 

53. (Previously presented) The system of claim 52 wherein when produced 
each one of the subtasks C 1( C2, . . . is developed using a relationship of the 

form C, = A//, e ' (mod p, ), where C, = C(mod p,), and e, = e(mod p,— 1), and where 
i = 1,2, ...,k. 

54. (Previously presented) The system of claim 52 wherein when produced 
each one of the subtasks Mi, M 2) . . . is developed using a relationship of the 

form M i =C, d ' (mod p,), where Mi = M(mod pj), and dj = d(mod pr-1), and where 
i = 1. 2 le- 
ss- (Currently amended) The system of claim 54, wherein the private key 
exponent d relates to the public key exponent e [[vai]] via d = e" 1 (mod((pi- 

56. (Currently amended) A system for communications of a message 
cryptographically processed with RSA public key encryption, comprising: 
means for selecting a public key portion e; 

means for developing k distinct random prime number p 1( p 2l . . . p*. where k 
> 3, and for checking that each of the k distinct random prime numbers 
minus 1, pi-1, p2-1, ■ - ■ Ptr-l is relatively prime to the public key portion 
e; 
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means for establishing a private key portion of d by a relationship to the 
public key portion e in the form of d = e" 1 (mod((pi-1 )(P2-I)* *(p^— 1))); 

means for computing a composite number, n, as a product of the k distinct 
random prime numbers; 

means for receiving a ciphertext message data C; and 

means for decoding the ciphertext message data C to a plaintext message 
data M using a relationship of the form 

M=C d (mod n): 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n; 

wherein decoding said ciphertext message data C is divided into sub-steps, 
one sub-step for each of the k distinct random prime numbers; and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the decoding of said ciphertext 
message data C if the k distinct random prime numbers are used, relative 
to the number of computational cycles for performing a decoding of said 
ciphertext message data C if the pair of prime numbers p and q is used 
instead . 

57. (Previously presented) The system according to claim 56, further 
comprising: 

means for encoding the plaintext message data M to the ciphertext message 
data C, using a relationship of the form C = A/f (mod n), where 0 < M < n- 
1. 
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58. (Currently amended) A system for communications of a message 
cryptographically processed with RSA public key encrypt i on siqninq . comprising: 
means for selecting a public key portion e; 

means for developing k distinct random prime numbers pi, P2, • • • Pk, where 
k > 3, and for checking that each of the k distinct random prime numbers 
minus 1, pi-1, P2-1, • . . P/H, is relatively prime to the public key portion 

e; 

means for establishing a private key portion d by a relationship to the public 
key portion e of the form d = e" 1 (mod((pi-1) (p2-l) "(p/c-1))); 

means for computing a composite number, n, as a product of the k distinct 
random prime numbers: and 

means for encoding a plaintext message data M with the private key portion 
d to produce a signed message M 5j using a relationship of the form 

M s = M** (mod a?), 

where 0 < M < n-1, the signed message M s being decipherable using the 
public key portion e; 

wherein p and q are a pair of prime numbers that product of which equals a 
composite number m, the k distinct random prime numbers each smaller 
than p and q, and the composite number m having the same number of 
digits as the composite number n: 

wherein encoding said plaintext message data M is divided into sub-steps, 
one sub-step for each of the k distinct random prime numbers: and 

wherein for a given number of digits for composite numbers n and m, it takes 
fewer computational cycles to perform the encoding of said plaintext 
message data M if the k distinct random prime numbers are used, 
relative to the number of computational cycles for performing an 
encoding of said plaintext message data M if the pair of prime numbers p 
and g is used instead . 
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59. (Currently amended) The system of claim 58 further comprising th e st e p 
of: 

means for decoding the signed message M s with the public key portion e to 
produce the plaintext message data M using a relationship of the 

form M = M s e (mod n) . 

60. (Previously presented) The system of claim 57, wherein the system can 
communicate the cryptographically processed message to another system that 
encodes/decodes data with RSA public key encryption using a modulus value 
equal to n independent of the k distinct prime numbers. 

61. (Previously presented) The system of claim 59, wherein the system can 
communicate the cryptographically processed message to another system that 
encodes/decodes data with RSA public key signing using a modulus value 
equal to n independent of the k distinct prime numbers. 

62. (New) The method according to claim 14, wherein n and m include 
values that are more than 600 digits long. 

63. (New) The method according to claim 16, wherein n and m include 
values that are more than 600 digits long. 

64. (New) The method according to claim 18, wherein n and m include 
values that are more than 600 digits long. 

65. (New) The method according to claim 20, wherein n and m include 
values that are more than 600 digits long. 

66. (New) The method according to claim 22, wherein n and m include 
values that are more than 600 digits long. 
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